The Pwning Machine – a new bug bounty testing environment from YesWeHack

guest · Jul 17, 2020

The Pwning Machine – a new bug bounty testing environment from YesWeHack
Docker-based suite includes a DNS server, HTTP router, web server, and pipeline runner
July 17, 2020
https://portswigger.net/daily-swig/...bug-bounty-testing-environment-from-yeswehack

YesWeHack, Europe’s largest crowdsourced security platform, has launched a Docker-based pwning environment for bug bounty hunters.

The Pwning Machine is equipped with an “all-in-one, customizable, and extensible suite of tools” including a DNS server, HTTP router, web server, and pipeline runner, a blog post on the YesWeHack website has revealed.
Anyone can set up a docker-based environment on a dedicated server in under 10 minutes, and the environment is easy to maintain, claims YesWeHack.
Click to expand...

Released yesterday (July 16), the project was first unveiled during virtual hacking conference NahamCon2020 in June, as shown in the video below.
Bug bounty hunters now routinely use third-party services to conduct security testing.

“Setting up a DNS and a web server that can handle wildcard subdomain with HTTPS was always tedious. The beta testers really loved being able to spawn a new domain by simply creating a new folder,” Philippe Lucas (AKA Bitk), the developer of the project, tells The Daily Swig.
Click to expand...

“This project, while functional and effective, still is at an early stage,” says YesWeHack. Ethical hackers are invited “to fork, develop, and amend the codebase on the project GitHub”.
Installation requirements and instructions can be found on GitHub.
Click to expand...

Log in or Sign up

The Pwning Machine – a new bug bounty testing environment from YesWeHack

guest Guest

Log in or Sign up

The Pwning Machine – a new bug bounty testing environment from YesWeHack

guest Guest

Useful Searches